Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
13/03/2024, 05:11
Static task
static1
Behavioral task
behavioral1
Sample
Downloader.bat
Resource
win10v2004-20240226-en
5 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Downloader.bat
Resource
win11-20240221-en
1 signatures
1800 seconds
General
-
Target
Downloader.bat
-
Size
269B
-
MD5
9a75419a719b9724e6c9fea4b01130b0
-
SHA1
53e20398e830115b07181e79d9d89c56bce3376f
-
SHA256
7dd3f3179b79f35d0006b8561de23b75fd5de295643a48f7f1bbd39fe6ecc06a
-
SHA512
ecaf3aebdb6b7c9eddae0c313c7a5b715167b9071e365fb5f53fc3d46906caf0c2fdb6b4e440c0cd1eb8758e1a7c6c094ac89238f51b0eda46035d14daa19782
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 2376 wrote to memory of 1860 2376 cmd.exe 81 PID 2376 wrote to memory of 1860 2376 cmd.exe 81
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Downloader.bat"1⤵
- Suspicious use of WriteProcessMemory
PID:2376 -
C:\Windows\system32\curl.execurl -o https://cdn.discordapp.com/attachments/1203539560856821800/1214035019396423690/ValorantSwapper.bat?ex=65f7a5382⤵PID:1860
-